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[57] ABSTRACT 

A personal, biometric authentication system is disclosed. 
The system can be used for controlling access to equipment 
or physical facilities. The system employs the combination 
of a unique, inherently specific biometric parameter recog- 
nized and compared with stored data and at least one 
non-specific biometric parameter of a physiological charac- 
teristic recognized and compared with physiological norms. 
Positive comparison results in authentication of an indi- 
vidual that is not incapacitated, dismeinbcred, or deceased. 

13 Claims, 1# Drawing Sheets 



.0 

(ceo camera}- 



4 N 



STORED 
VECTOR 



FRAME 





IMAGE 
PROCESSING 




IMAGE 
COMPARISON 



20^ 



24 



X 



STORED 
PHYSKXOGtCAL 
ACCEPTANCE 
RANGES 



"EKS Vj 

Vei^ctrooesJ t 



ANALOQ I 

ELECTRONICS f 



LEO'S* \" 

^photodetectorJ ; 

28 



ANALOG 
ELECTRONICS 



38 \l 



/TEMPERATURE' 
L SENSOR 



n 



ANALOG 
ELECTRONICS 









MULTIPLEX 






ANALOG 




SENSOR 


TO 


■» 


PROCESSING 


DtGfTAL 






CONVEflTOR 













I SENSOR 
, INTERFACE 
(ELECTRONICS 



328 
330 
332 



z 



350 

accept/reject] \{ 

DECISION 



17 



PULSE 
VIA OPTICAL 



OXYGEN 
SATURATION 



SKIN 
TEMPERATURE 



COMPARE 
CORRELATION 



\ CCWPUTCRSYSTEM , 



07/23/2004, EAST Version: 1.4.1 



5,719,950 

Page 2 



U.S. PATENT DOCUMENTS 

4,952,92* 8/1990 Carroll et al. 340/82534 

4,975,581 12/1990 Robinson et d. 250/339 

4,993,068 2/1991 Hosenka 382/2 

5,012,810 5/1991 Strand 128/640 

5,067,162 11/1991 Driscofl, Jr. ct al ... 382/5 



5,078,136 1/1992 Store 128/633 

5,103/486 4/1992 Grippi 582/4 

5,133,356 7/1992 Biyanetd. 128/640 

5,163,094 11/1992 Prokoski 382/2 

5,202,929 4/1993 Lemdson „ 382/2 

5,204,670 4/1993 Stintoa 340/82534 

5,229,764 7/1993 Matched 382/2 

5,291,560 3/1994 Daugman 382/2 



07/23/2004, EAST Version: 1.4.1 



U.S. Patent 



Feb. 17, 1998 



Sheet 1 of 10 



5,719,950 




07/23/2004, EAST Version: 1.4.1 



U.S. Patent Feb. 17, 1998 Sheet 2 of 10 5,719,950 




Fig. 2b 



07/23/2004, EAST Version: 1.4.1 



U.S. Patent Feb. n, ms sheet 3 or 10 5,719,950 




Fig. 3c 



07/23/2004, EAST Version: 1.4.1 



U.S. Patent 



Feb. 17, 1998 



Sheet 4 of 10 



5,719,950 



106 



118 



ISOLATED 
DC/DC 
CONVERTER 




110 





>• 


0.05Hz-30Hz 
BANDPASS 
FILTER 




> — ► 







. 126 



114 



Fig. 4 



116 



252 

L 



SKIN 
TEMP. 



260 



256 



r 



250 



ISOLATED 
DC/DC 
CONVERTER 




\ 



258 



262 



AMBIENT 




TEMP. 





261 




0.05Hz 
LOWPASS 
FILTER 

~? 

264 



272 



268 



Fig. 6 



07/23/2004, EAST Version: 1.4.1 



U.S. Patent 



Feb. 17, 1998 Sheet 5 of 10 5,719,950 




07/23/2004, EAST version: 1.4.1 



U.S. Patent 



Feb. 17, 1998 



Sheet 6 of 10 



5,719,950 



300 




340 

1 



DIGITIZE EKG, OPTICAL. AND 
TEMPERATURE SIGNALS- 
128 SAMPLES @ 40 Hz 



ACQUIRE 
FINGERPRINT 
IMAGE 



342 



SMOOTH OPTICAL AND 
EKG SIGNALS 
(5 POINT ROLLING AVERAGE) 



I 



FIND MAJOR PEAKS IN EKG 
AND 910 nm SIGNALS 



PROCESS IMAGE 
TO OBTAIN 
REFERENCE VECTOR 



344 



RECOVER 



± 



CALCULATE PULSE RATE VIA 
EKG AND 910nm 
OPTICAL SIGNALS 



328- 



STORED 



VECTOR FROM 
MEMORY 



346 
_L 



FIND VALLEY POINTS 
IN 910 nm SIGNAL 



•310 



320 



322 



■324 



■326 



CALCULATE OXYGEN SATURATION 
FROM 660 AND 910 nm SIGNALS 
AND 910 nm PEAK AND VALLEY 
LOCATIONS 



356- 



COMPARE STORED 
AND PROCESSED 
VECTORS 



Fig. 7 



330- 

s IF NO 
MATCH, 
REJECT 
ACCESS 



I 



AVERAGE TEMPERATURE 
SIGNAL AND CALCULATE 
AVERAGE TEMPERATURE 



332- 



± 



COMPARE PULSE RATE 
FROM OPTICAL AND EKG 
MEASUREMENTS 



352 

( 

IF NO 
MATCH, 
REJECT 
ACCESS 



334- 



RECOVER STORED PHYSIOLOGICAL 
RANGES FOR OXYGEN SATURATION, 
PULSE, AND TEMPERATURE 



336 

350 
1 



I 



COMPARE MEASURED OXYGEN 
SATURATION, PULSE AND 
TEMPERATURE TO RANGES 



I 



IF BOTH CONDITIONS ARE MET, USER AUTHENTICATED, 
ACCESS ALLOWED 



IF NO 
MATCH, 
REJECT 
ACCESS 

\ 

354 



07/23/2004, EAST Version: 1.4.1 



U.S. Patent Feb. 17, 1998 Sheet 7 of 10 



5,719,950 




07/23/2004, EAST Version: 1.4.1 




07/23/2004, EAST Version: 1.4.1 



U.S. Patent Feb. 17, 1998 Sheet 9 of 10 5,719,950 




07/23/2004, EAST Version: 1.4.1 



U.S. Patent Feb. 17, 1998 Sheet 10 of 10 



5,719,950 




07/23/2004, EAST Version: 1.4.1 



5,719,950 

1 2 

BIOMETRIC, PERSONAL seeking biometric, personal authentication is actually 

AUTHENTICATION SYSTEM present for authentication. Existing devices can be circum- 
vented by someone, other than the genuine person seeking 

This is a continuation of application Ser. No. 08/217.433 authentication, actually presenting the biometric pattern of 

filed Mar. 24, 1994. now abandoned 5 an authorized individual seeking biometric, personal authen- 
tication. 

GOVERNMENT RIGHTS For example, a fingerprint analysis that does not recog- 

Tliis invention was made with Government support under ^whether the finger is attached to a living human being 

Loral Subcontract SO-124465-S and MDA9O4-W-C4074. , 0 ^ * ^™ented by e ectromc or photo^apruc recon- 

The Government has certain rights in this invention. 10 ^cUons of the fingerprint or ^memberment of the finger, 

^ Other evidence the art presently employs for confirmation 

FIELD OF THE INVENTION cao ^ cuicumvent£ ^ by use of subterfuge and substitution. 

The present invention solves a problem unrecognized in 

This invention relates to biometric, personal authentica- the art by providing a biometric, personal authentication 

tion systems that authenticate identities of individuals. 1* system that requires correlation among a unique, inherently 

specific biometric parameter with at least one non-specific 

BACKGROUND OF THE INVENTION biometric parameter in a physiologically acceptable range. 

Personal recognition systems generally utilize a single Previously, the art has considered two Id nds of errors. The 

highly specific characteristic for identifying valid access first kind is where the authentication system would errone- 

requests, sometimes in association with another method of 20 ously reject authentication of a truly authorized user. The 

individual authentication. second kind of error is where the authentication system 

Published patent application NL 8503290, (Sibum) would erroneously accept authentication of a truly unautho- 

according to an uncertified English translation teaches iden- ™ d user - Both Wmls of OTQr « based on me accuracy and 

rjfying a person by recognition of a stored pattern, eg. M precision of authentication based on a unique, inherently 

fingerprint, preventing unauthorized access or use, using specific biometric parameter. The parameter can be too 

pattern analysis with determination of body heat and/a- hair severely applied, (rejecting authentication when it should be 

size and color to prevent use of a falsified replica of the accepted,) or too loosely applied, (accepting authentication 

fingerprint wheD & rejected). In general, the two kinds of 

(Oayden) teaches idenuflcadon of a person by monitoring g^nVerror rate for falT^ection increases the fake 

one or a number of "bomettic- parameters such as bone acce ^ nte( ^ ^ vmAuthentication systems, 

structure, temperature, fingernail pattern, creases in the palm esoe H~u v „, feced with Ms AtUrL. 

or fingers of the hand and comparing the monitored data espccwuy access systems ' m 1 mm 11118 auerama - 

with stored characteristics. Further, teachings include refer- 35 P 6 P 1 * 46 "' • nv « nt »o n considers a third land of error and 

ence to speech, handwriting and piano keyboard "signa- » Pf? Mcm ln * t 1 me <« has not recognized. An unrec 

lujj" ognized third possible error is where me authentication 

U.S. Pat No, 4,896363^ (Taylor)! teaches a ^method for SorS^ 

ar^ts^dcompamonof a five fingerpant to a stored of a unique , inherentryTpeculc biometric parameter from an 

record and an apparatus for foncuonai use of the method «o uscr m mc ^ ^ sccond ^ md 

Commercial products jesmbedm Taylor mcludepersonal solutioils t0 ^ sud) ^ do not consider or adequately 

access apparatus manufactured by Thumbscan Corporation. mca5Urc mc ^ of circumvention of the authentication 

U.S. Pat Nos. 4,869.254 and 5,078,136 (both Stone et at.) system, 
teach a method for non-invasive measurement and calcula- ^ nt errors of the third kind by 
tion of oxygen saturation on blo^ m me human body under ^0*,^ ^ authentication system that recognizes a unique, 
transient conditions and describe apparatus for functional inherently specific biometric parameter and other non- 
use of the method. Commercial products described in Stone specific biometric parameters that need not be unique to the 
et aL are widely identified as pulse oximeters. individual but are comparable to physiological norms and 

U.S. Pat. No. 5,103,486 (Grippi) teaches a scanning of a are variable during the time of authenticatioa 

combination of fingerprint with an overwritten projection of The present invention solves the problem that at least two 

a signature to identify an individual, and claims the projec- modes of biometric recognition must fail or be circumvented 

tion of "any biological feature of the user". A biological [ D order to authenticate an unauthorized user, 

feature is described as live skin tissue, "Biometric parameters" means dimensional and physi- 

SUMMARY OF THE INVENTION 33 °*°8* ca ' characteristics of an individual human. Some bio- 
metric parameters (e.g., fingerprints (including 

None of the authentication, recognition, or access control thumbprints), palm prints, pore prints, voice prints, hand- 
systems in the art recognize die problem that biometric writing (including signature), and retinal configurations), are 
devices can be circumvented by presenting the biometric both unique and inherently specific and are relatively easy to 
pattern of an authorized individual seeking biometric, per- copy and reproduce or model for later comparison for 
sonal authentication who has been incapacitated, purposes of authentication. Fingerprint analysis refers to the 
dismembered, or is deceased at the time of attempted identification and measurement of minutia points 
authentication, recognition, or access. (bifurcations and end points). Pare print analysis refers to 

Stated another way, none of the authentication, the identification and measurement of pores within the 

recognition, or access control systems in the art recognize 65 ridges of the fingers. 

the possibility that biometric parameters can be correlated or Other biometric parameters are non-specific and not 

otherwise interrelated in order to assure that an Individual unique to an individual. Some non-specific biometric param- 
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cters include dimensional characteristics (e.g., bone Most preferably, the biomctric, personal authentication 

structure, and physical dimensions) and skin temperature system of the present invention utilizes fingerprint analysis 

mat are not likely to have some variability during the time (used in this invention to include thumbprint analysis) of an 

required for authentication and physiological characteristics individual in combination with pulse oximetry and electro- 

(e o electrocardiographic (EKG) signals, pulse, and spec- 5 cardiography of the individual. The fingerprint analysis 

tral characteristics of human tissue) that are likely to have supplies the unique, inherently specific Wometric parameter 

some measurable variability during the time required for while the data from a pulse oximeter and EKG supplies the 

authentication. Of the two, physiological characteristics are non-specific parameters), preferably both synchronized in 

more meaningful to biometric, personal authentication time between two non-specific parameters and correlated 

because such physiological characteristics are more difficult between the non-specific parameters and the unique, inher- 

to simulate because such measurements are observable eotly specific biometric parameter. Specifically the EKG 

within physiological ranges, variable in time and, in char- signal as measured in real time is synchronized with the 

acteristics such as EKG and pulse, syncbronizable within a pulse measured by the pulse oximeter as change of rate of 

single human body. blood flow in real time. 

One or more non-specific biometric parameters used in For example if me fingerprint analysis matches the 

combination with one or more unique, inherently specific 15 unique, inherently specific biometric parameter, and if the 

biometric parameters provides extremely high precision pulse oximeter dam of poise and percentage oxygen satura- 

protection against circumvention, and does not require time tion and EKG as non-specific biometric parameters correlate 

consuming and inordinate measurement for authentication within acceptable norms and rf r^se is determmed by two 

for purposes such as access control to a secure function or different and synchronizabte methods <*^^ <^ 

ftaeVto perform a function. Further non-specific physi- 20 to be synchronized, then the individual^ntmed with fce 

Seal cnTacteristics such as Wood alcJ^nte* or rmgerprmt is ^ incapad^ or deceased, 

levTof controlled chemical substances (e.g., legal drugs and. *c? aumenucahon of mc J n ^^.^^ 

used in illegal quantities or at illegal times or illegal drugs) Optionally, skin temperature can be added to provide further 

tote b3 ciiW be used to determine if an otherwL confirmation of viability of the mdmdual seeking authen- 

authorized user is authenticated to be in acceptable physical & tication. 

c^SoTtote granted access to a motor^cle £ other With authentication of an mdmdual according to the 

SS«t« ^^nTJSpnt present invention, a variety of actions can be taken. Non- 

faahty or equipment {T^ examples of actions available to the authenticated 

The biometric, personal authentrcation system of the ^ to acccss to 

present invention compnses: facilities, recognition of the individual for a variety of 

(a) storage subsystem to store a unique. uAtnafly spe- rea$on coafinnation rf nce of me md ividual in an 
cific biometric parameter from at least one xndividual in authoiizcd locatioQ OT using authorized equipment, and 
a species; omer s^^ous where the status of an individual is remotely 

(b) firstrecognition subsystem to detect the unique, inhcr- ^ennined or controlled. 

entry specific biometric parameter in an mdividual 3J Beyond &c M levcl Q f authentication of an individual 

seeking personal authentication; ^ authorization of entry to a physical facility or use of 

(c) second recognition subsystem to detect at least one equipment, suitability of performance may be verified for a 
non-specific biometric parameter of a physiological se oond level of access control through measurement of 
characteristic having measurable variability during the Wood gases OT other characteristics, such as blood alcohol or 
time of authentication in the individual seeking per- ^ C0D trollcd chemical substances levels, that would impair the 
sonal authentication; individual's operation of equipment such as a mass transit 

(d) first comparison subsystem to compare the unique, vehicle. 

inherently specific biometric parameter detected by the A feature of the present invention is that inherently 
first recognition subsystem with the unique, inherently specific and non-specific biometric parameters can be con- 
specific biometric parameter stored in the storage sub- 4J currently and non-invasively gathered for recognition, 
system; comparison, and determination of authentication. 

(e) second comparison subsystem to compare each non- Another feature of the present invention is that non- 
specific biometric parameter to physiological norms for specific biometric parameters need not be identified to the 
the species within an acceptable range; and individual seeking personal identification. 

(f) authentication subsystem to confirm identity of the 50 An advantage of the present invention is that individuals 
individual seeking personal authentication by evaluat- seeking personal authentication undergo multiple biometric 
ing the comparisons made by first comparison sub- parameter comparison with security measures that poten- 
system and second comparison subsystem, tially avoid false authentication. 

Desirably, an optional step (g) includes a subsystem to use One optional feature of the invention includes the use of 

successful authentication to provide access. 55 information input and data entry apparatus to minimize 

Preferably, the second recognition subsystem detects at searching of stored data of the unique, inherently specific 
least two non-specific biometric parameters with physiologi- biometric parameter, such as by use of a personal identifi- 
ed correlation of the non-specific biometric parameters cation number or code, a photo, or other means, 
within an acceptable range. More preferably, the detection of Another optional feature of the invention includes appa- 
at least two non-specific biometric parameters are synchro- 60 ratus for reading and analyzing encoded and encrypted 
nized. Examples of non-specific biometric parameters of information resident on magnetic or optical media or a 
physiological characteristics include bloodflow, spectral hologram stored on a plastic card possessed by the uidi- 
identityof tissue, dectrocardic^phic sigi^ vidual seeking authentication, rather than stored in the 
oxygenation, hematocrit, biochemical assays of tissue, elec- apparatus for receiving data of the unique, inherently spc- 
trical plemysmography, skin exudates, mechanical proper- 65 cific biometric parameter. 

ties of skin, electrical properties of skin, transpiration of Another optional feature of the invention is to provide 

gases blood pressure, and differential blood volume. additional authentication using apparatus mat identifies and 
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compares more than one unique, inherently specific biomet- Authentication system elements include fingerprint image 

ric parameters such as written signature, retinal sensor 10 inputing data for analysis to computer logic and 

configuration, voice recognition, or physical dimensions of memory functions 4 for unique, inherently specific 

the individual or features of the individual identification, and non-specific biometric sensors 24. 26, and 

5 28 with signal process functions 3# inputing information for 

BRIEF DESCRIPTION OF THE DRAWINGS analysis to computer system 6 to recognize dectrocardio- 

_„ - . . . ... r — r , ^jl^ai gram (EKG), pulse, and blood oxygen saturation for non- 

FIG. 1 is a schematic illustration of a preferred embodi- ^ * ' *rr ' . . * * . . , , 

* * *t. • specific biometnc validation and skin temperature for fur- 

ment of the invention. ^ optional V alidaUon. With this combinaUon of 

FIGS. 2a, 2b, and 2c are plan views of a preferred w information the individual seeking authentication and access 

embodiment of the invention. ^ te identified and a determination can be made 

FIGS. 3a, 3b, and 3c are cutaway views of a preferred that the individual seeking authentication is not 

embodiment of the invention showing positions of the incapacitated, dismembered, or deceased. In other words, 

measurement apparatus. the biological state of the individual, as measured non- 

FIG. 4 is a block diagram of the apparatus for recognizing 15 in vasively via physiological characteristics that vary in time 

the non-specific biometric parameter of electrocardiographic during the authentication, is used with the unique, inherently 

signals. specific parameter of a fingerprint to authenticate that the 

FIG. 5 is a block diagram of the apparatus for recognizing individual is alive and functioning with acceptable physi- 

the non-specific biometric parameter of Wood oxygen satu- logical conditions for authentication and resulting access, 

ration. 20 Fingerprint recognition camera 10 and system 4 employs 

FIG. 6 is a block diagram of the apparatus for recognizing wcU apparatus, circuitry, and software. The individu- 
al non-specific biometric parameter of skin temperature. fingerprint pattern is detected by camera 10 when the 

FIG. 7 is a flow chart for completing authentication ^vidiialpla^ 

' J* " "T ' w ^ FIG. 2 and described below). The detected image is captured 

according to the present invention. 25 and analyzed by image processor 12, developed into a vector 

FIG. * is an electrical schematic illustration of circuitry array 0 f fingerprint minutiae which is validated by compara- 
tor processing the non-specific biometric parameter of elec- ^ 14 t ^ lI0U ^ i correlation of the scanned image vector array 
trocardiographic signals as shown in FIG. 4. with the array selected from pre-stored memory file 16 

FIG. 9 is an electrical schematic illustration of circuitry indexed by PIN. If the image matches the stored 

for producing pulsating power to the red and IR lamps for 30 information, then output 18 of comparator 14, is turned on, 

the non-specific biometric parameter of blood oxygen satu- signaling the decision process as diagrammed in FIG. 7 and 

ration as shown in FIG. 5. described below. 

FIG. 1# is an electrical schematic illustration of circuitry Fingerprint recognition systems such as camera 10 work- 

for processing the signals indicating non-specific biometric i D g with system 4 are commercially available from 

parameter of blood oxygen saturation as shown in FIG. 5. 35 ThumbScan, Inc., Lombard 111. Such system 4 is described 

FIG. 11 is an electrical schematic illustration of circuitry in U.S. Pat. No. 4,896363 (Taylor), the disclosure of which 

for the temperature sensor circuit shown as a block diagram is incorporated by reference herein. Alternatively, camera 10 

in FIG. 6. is conimerdally available as Model FC-11 Fingerprint Cap- 
ture Station, from Digital Biometrics, of Minnetonka Minn. 

EMBODIMENTS OF THE INVENTION 40 when Digital Biometrics camera 10 is used, then frame 

FIG. 1 shows a schematic of a preferred enuxxliment of grabber IP-8 Irnage Processing Board con^dally avaii- 

the personal, biometric authentication system of the present *> le *°» Electronic Systems LTD, of Dorual 

invention. This embodiment is a counter top mounted access Q" cbcc ' Canada is also used, along with comparison soft- 

control unit containing the data entry and sensor apparatus. 45 ™* commercial available from BlitzMatch, Inc. of 

The access control is interconnected with a protected elec- Champaign, HI. 

tronic computer system to provide authentication of the The pre-stored fingerprint selection pattern may be stored 

individual requesting entry and use of the system. in a dedicated ROM memory of the fingerprint recognition 

This embodiment utilizes a portion of the general purpose system 4; or stored in the memory of computer terminal 

computer 2 for processing 6 of the non-specific biometric 50 ^ * e individual through a standard key pad 

indicator data and processing 4 of the unique fingerprint connected to a asynchronous I/O port; or entered into the 

l ma g C security access system via a magnetic or optical identifies- 

An individual seeking access first enters a identification tion °^ * esented to * e aco ^ ^JT^ * c of 

code followed by placing both hands on contoured surfaces the acoc$s systei^The ideation card may 

containing various sensors for a period of approximately ten 55 replace or supplement die entry of the PIN using the key pad. 

seconds until authentication is completed successfully or Non-specific biometric recognition circuitry shown in 

unsuccessfully, and, preferably, access is granted or denied FIG. * include biomedical (EKG) electrodes 24 communi- 

Ideatification code entry 8 is a personal identification code eating with analog signal processor 32, light emitting diode 

number (PIN) or can be an identification card inserted and (LED) sources (one in the visible range (about 660 nm) and 

read to request access through the access system. Use of 60 *e other in the near infrared (NIR) range (about 910 am)) 

personal identification codes narrows the search process and detector 26 co mmunicatin g with timed power source 

needed to compare the unique, inherently specific biometric 411(1 signal processor 34, for the plethysmography signals of 

parameter detected by the device with stored data. This acts the blood pulse/oxygen monitor and temperature sensor 28 

to speed operations needed for establishing personal authen- communicating with signal processor and ambient temper a- 

ti cation. Further the PIN number can provide an additional 63 ture sensor 

preliminary level of comparison in the authentication pro- After analog processing, the signals are communicated to 

cess. computer system 6 digitized for analysis through interface 
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22 (such as a RIT-8L5 card available from Analog Devices window 42 in line with the entry axis of the thumb posi- 

of Norwood. Mass. The digitized signals are processed tioning cavity 62 to be in contact with the skin near 

within a general purpose computer CPU, for example a IBM connection of the mumbprint region of the hand. 

PS/2, available from IBM Corporation of Armook, N.Y. The FIGS. 4, S, and 6 are block diagrams of circuitry for the 

sensor processing 38 follows a logic pattern programmable 5 devices for measuring the con- specific biometric 

by a person of ordinary skill in prograrnming the general parameters — EKG t blood oxygen, pulse, and skin 

computer of choice. The logic pattern includes a variety of temperature, — expanding the content of sensor interface 

calculating, smoothing and comparing steps as shown in the electronics block 30, and sensors 24. 26 and 28. 

flow diagram of FIG. 7. Acceptances ranges are stored in The sensors 24 used for BKG detection are signal elec- 

memory 20 and compared with the individual data at deci- to trodes 102 and 104 plus ground electrode 106 shown in FIG. 

sion states 324. 328, 330 and 332 as further defined within 4. These are the same electrodes as 46 and 48, and ground 

the flow diagram of FIG. 7. electrodes 44 and 50 (which are connected together) of FIG. 

FIG. 2 is a counter-mounted embodiment of the security 2, respectively, wherein ground electrode 106 and first 

access instrument, shown in three views, 2o-2c. FIG. 2a biomedical electrode 104 contact the left hand and second 

shows semi-frontal view 40-A; FIG. 2b shows side plan 13 biomedical electrode 102 contacts the right hand (not 

view 40-B; and FIG.2c shows top plan view 40-C Counter- shown). 

mounted security access instrument 60 has a thumb or finger Biomedical electrodes useful in the present invention are 

positioning cavity 62 preferably with an indented platten. for commercially available from Minnesota Mining and Manu- 

receiving the thumb or finger comfortably, open through factoring Company, St. Paul, Minn. Particularly preferred 

front surface 64, extending to the interior of the instrument 20 mz biomedical electrodes described in U.S. Pat No. 5,012, 

providing access to detector window 42 and other sensor gjo (Strand et aL); U.S. Pat. Nos. 4,524,087; 4,539.996; 

elements described below, wherein the sensors are protected 4,554,924; and 4,848353 (all Engel); and U.S. Pat No, 

from stray light The location and configuration of cavity 62 5,133356 (Bryan et at), the disclosures of which are 

allows positioning of both left and right hand of the indi- incorporated by reference. 

vidual seeking authentication on biomedical electrodes 44, 25 Electrodes 102, 104, and 106 are mounted with conduc- 

46, 48, and 50 with the thumb or finger of one hand properly tive ^^ve sur faces exposed for contact with fingers or 

oriented on detector window 42 inside cavity 62. A switch thumbs. Electrodes 102, 104, and 106 are changed periodi- 

(not shown) can be mounted on the instrument 60 adjacent caUv ^ ^ conductive adhesive contact surface is contami- 

electrodes in order to activate scanning. natcd by dirt and dry skin flakes, mectrodes 102 and 104 are 

Detector window 42 can be a prism for redirecting light, connected to the inputs of differential instrumentation ampli- 

preferably having a coating to present a good *feeT to the ficr 110 which provides signal amplification with high input 

user while protecting window 42. impedance as required for efficient interface to electrodes 

This configuration is only one of many that would allow 102 and 104. Instrumentation amplifier 110 is followed by 

for positioning of the hands or other body parts in contact 35 isolation amplifier 112 to provide electrical isolation to the 

with the EKG electrodes while also providing positions for individual Both instrumentation amplifier U0 and isolation 

a selected finger or toe on the fingerprint scanner. For amplifier 112 are powered by isolated DC — DC converter 

example, the measurement section could be essentially flat 118 providing safety protection by electrical isolation from 

with the detector window in the center and BKG electrodes the main power supply. 

configured on either side such that a toe or finger could be ^ The EKG signal is processed by band pass filter 114 to 
positioned on the detector window and EKG contact made eliminate unwanted noise outside the 0.05 Hz to 30 Hz 
to parts of the hand or foot frequency band and amplified by buffer amplifier 116 to 
FIGS. 2a and 2c show a keypad 54 for entry of PIN or compensate for signal level from the human body. The 
other coded information input and display window 56 for processed EKG signal output 126 is communicated to ana- 
information and status output This configuration can be 45 log to digital interface 22. 

expanded to include readers for ID cards or memory devices A block diagram for blood oxygen saturation sensor is 

and sound transducers for verbal or sound tone input or shown in FIG. 5. The sensor is a pulse oximeter type and is 

output well known to those skilled in the ait. The emitters and 

This counter-mounted embodiment of the security access sensors of this device are located in the detector window 42 

instrument is connected by appropriate electrical cables (not 50 (shown in FIG. 3), delivering near infrared (NIR) and visible 

shown) to a computer for power, signal and data commu- light at multiple wavelengths through human tissue of the 

nication. Further equipment could easily be built into the thumb and detecting the transmitted light The light emitters 

access instrument to include microprocessor and memory are powered at an alternating rate such that one light is off 

for handling the computer related logic functions, power when the other light is on, the driving rate of the lights is at 

supply, and output devices; such that the output of this 55 * frequency much greater than the human heart rate, for 

instrument would be a simple call signal for use with a relay example 1500 Hz, 

or other response apparatus to allow the individual access to The detected light sampled at the same driving rate and is 

the secured equipment or facility after authentication is pulsatile in nature related directly to the normal heart pulse 

obtain cycle. Change in detected light intensity at the peak and at 

FIGS. 3a-3c show the counter-mounted embodiment of 60 the valley phases of a particular pulse cycle provides a 

the security access instrument, in partial cutaways detailing relative measure of absorbance in the arterial blood By 

the position of window 42 with respect to spring assembly comparing the relative absorbances at multiple wavelengths 

90 such that light emitting diodes 92 and 96 arc essentially (usually about 910 nm and 660 nm), an oxygen saturation 

oUametrically opposite photodetector 98. Alternatively, light value can be determined for the blood of the subject 

emitting diodes 92 and 96 and photodetector 98 can be 63 Light source 140 delivers light at two wavelengths. One 

mounted above and below the thumb positioning cavity. light emitting diode (LED) 142 emitting light at a wave- 
Optional skin temperature sensor 80 is positioned next to length of 660 nanometers and one LED 144 emitting light at 
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a wavelength of 910 nanometers are driven by LED drive 
sources 148 and 150. The LEDs arc timed by clock generator 
146 generating intermittent on and off condition providing 
two distinct states for the overall light source: 910 diode 
on/660 diode off shown as 156, 910 diode off/660 diode on 
shown as 151 

Detector 170 transduces the transmitted light to an elec- 
trical signal with variable current silicon photodiode 172. 
The variable current signal is converted to a variable voltage 
by current to voltage amplifier 174. Detection is synchro- 
nized with the LED emitter timing, detecting and holding the 
light level transmitted during each of the two distinct states 
with sample and hold circuits 182, and 186. Each transmit- 
ted light signal includes both a DC and AC components 
which are separated for the blood oxygen calculation and 
processing in sensor processor 38. The 910 nanometer signal 
is amplified 190 and filtered 192 to eliminate unwanted 
signal above 10 Hz and communicated to interface 22 
through connection 198-D. AC component is separated by 
0.3 Hz high-pass filter 194, amplified by amplifier 196 and 
communicated to interface 22 through connection 198- A. 

Parallel processing of the 660 nanometer signal is through 
channel 200, 202, 204. 206 and 208-A and 208-C 

The blood oxygen measurement of mis system is well 
known and described in U.S. Pat Nos. 4,869,254 and 
5*078,136 (Stone et at), the disclosures of which are incor- 
porated by reference herein. Pulse oximeters are commer- 
cially available in the manner described by these patents, 
including light emitting diodes 142 and 144 and detector 170 
sold by Nellcox Incorporated of Hayward, Calif. 

Processing of the pulse oximeter signal is described 
herein as time domain signal processing. Clearly the pro- 
cessing could be done in the frequency domain by digitizing 
the signal directly at the sensors and using digital signal 
processing techniques. 

Optionally, skin temperature is measured with a solid state 
sensor chosen for linearity across the temperature range of 
the human body. Block diagram of the associated measure- 
ment circuit 250 is shown in FIG. 6. Skin temperature sensor 
252 is supplied by isolated DC/DC converter 256, for 
protection of the individual. Voltage from sensor 252 is 
linearly dependent on the temperature, is amplified and 
isolated from other circuitry by amplifiers 258 and 26Z The 
temperature signal is filtered 264 to eliminate all frequencies 
above 0.5 Hz. to eliminate electrical noise and communi- 
cated to interface 22 through connection 272. Optionally, an 
ambient temperature sensor 254 may be used to compensate 
for environmental conditions as shown in block diagram 
260. The signal from optional temperature sensor 254 is 
amplified by amplifier 261 and communicated to interface 
22 through connection 268. 

Recognition and comparison for the personal, biometric 
authentication system is based initially on fingerprint rec- 
ognition followed by analysis of the biometric sensor signals 
for EKG 126, NIR light at 910 nanometer 198-A and 198-C 
and at 660 nanometer 208-A and 208-C, and temperature 
272. Authentication is processed in an embedded logic 
program within computer 6 using fvogramming written in 
WATCOM C version 9.5 from WATCOM International 
Corp, Waterloo, Ontario, Canada computer code in a manner 
known to those skilled in the art Description of the recog- 
nition subsystems, comparison subsystems, and authentica- 
tion subsystems is shown in FIG. 7. Alternatively, authen- 
tication can be processed using neural network 
programming in a manner known to those skilled in the art 

Authentication processing as shown in FIG. 7 is started 
with keying in a PIN by the individual seeking personal 
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authentication or by insertion of an ID card communicating 
a PIN identification 300. The individual places his or her 
hands in the locations shown in FIGS. 2a-2c and the 
individual's fingerprints are scanned 340 and processed to 

5 obtain the reference vector 342. The appropriate record 344 
is recalled from memory 16 and compared 346 for accep- 
tance or rejection. If the comparison is rejected, authentica- 
tion has failed, regardless of the comparison arising from the 
non-specific biometric parameters. In a preferred 

10 embodiment, access is denied because of the rejected 
authentication. 

In parallel with the recognition and comparison sub- 
systems used for fingerprint recognition with data from 
fingerprint storage, the non-specific biometric recognition 

15 steps are started concurrently as shown in FIG. 7. 

Biometric data are recognized and collected 310 over 
multiple samples (about 128) of the EKG signal, optical 
signals, and optional temperature signal taking a period of 
approximately 3.2 seconds with EKG signal preferably 

20 collected in a period of about 0.5 seconds. The logic process 
then proceeds to analyze the plethysmographic, EKG, and 
temperature signals by smoothing the optical and EKG 
signals using a five point rolling average 320, finding the 
major peaks in the EKG and 910 nm optical signals 322. 

25 calculating pulse rate of EKG and optical signals 324, 
finding valleys in the 910 nm NIR signal 326, calculating the 
oxygen saturation ratio from 660 nanometer and 910 nanom- 
eter optical signals 328, and averaging the temperature 
signal and calculating the average actual skin temperature 

30 330. 

Next a comparison 332 is made of the pulse rate obtained 
concurrently by the 910 nm optical plethysmography signal 
and the EKG signals. If the pulse rate as measured by both 

^ methods is within an acceptable synchronicity, then logic 
processing continues. If there is no acceptable synchronicity, 
then the authentication is rejected 352, regardless of the 
results of the comparison 346 of fingerprint identification. 
If the two pulse rates are within acceptable synchronicity, 

40 then physiological norms of oxygen saturation, pulse, and 
temperature are recalled 334 for comparison 336 with the 
calculated oxygen saturation ratio 328. the pulse rate 324, 
and the temperature 310. If there is acceptable comparison 
336, then with an acceptable fingerprint comparison 346, 

45 there is authentication 350. If there is no acceptable com- 
parison 336, then authentication is rejected 354 regardless of 
the results of fingerprint comparison 346. As presently 
preferred, authentication subsystem then grants access to 
equipment or facilities. 

so FIG. 8 is the detail circuit diagram of the EKG circuit 
shown as a block diagram in FIG. 4. TABLE 1. is the listing 
of components and devices used in this circuit 

TABLE 1 

55 

COMPONENTS 



B132 NE2H Lamp 

C1.C2 500 pf 

C3 200 pf 

« C4,C5,C8 1 Mf 

W C6.C7 lOjif 

C9,C10,Cll,Cl2 t C13,CU 0.56 pf 

R2JU 300K 

R3,R4,R7 50K 

R5,R6 5M 

E18,H9,R10,R1L,R12 20K 

65 R13,R34 2.ZK 

R14 30K 
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TABLE l-continued 



TABLE 3 



R16 
R17 
R18 

RI9.R20321,R22Jtt3,R24 
R3S 

R36.R37 
R64 

DEVICES 

U1,U3,U4 
Operation Amplifier: 
National Semicooductor 
Santa Clara, CA 

U2 

High Voltage Isolation Amplifier 

Burr-Biown 

Tucson, AZ 

D1,D2J)3,D4 

Diode: National Semiconductor 
Santa Clara, CA 



1M 

4.75K 

47K 

10K 

100 

22K 

IK 



LF444CN 



ES0107A 



1N4148 
1N914 



10 



15 



20 



COMPONENTS 

C42C43 0.1 Mf 

C44,C45,C47,C48,C49, 0.47 nf 
CS0,C52,C53£36 

C57 10 pf 

R15 10M 

R54,R55,R56,R57, 25K 
R62 t R63 T R64 f R65 

R524153 560 

R66>R58 10M 

R67J159 5K 

R60368 33CK 
DEVICES 

U6,U8,U8 LF444CN 
Operation Amplifier. 

National Sczmocoxtuctar t Santa Clara, CA 

U12.U11 LPW 

Sampk and Hold: 

National Semiconductor, Santa Clara, CA 



FIG, 9 is the detail circuit diagram of die blood oximeter 
light power circuit shown as a block diagram 140 in FIG. 5. 
TABLE 2 is the listing of components and devices used in 25 
this circuit 



FIG. 11 is the detail circuit diagram of the temperature 
sensor circuit shown as block diagrams 250 and 260 in FIG. 
6. TABLE 4 is the listing of components and devices used 
in this circuit 

TABLE 4 



TABLE 2 



COMPONENTS 

C21 
C19 
C20 
C22 
C25 
C32 
C40 
R40 
R41 

R46 > R49,R30 

R38 

R39 

R45,R43 
R47.R4* 
R42 > R44 t R51 
DEVKZES 

U9 

Clock/Timer. National Semkooductor 

Santa Clara, CA 

U10 

Anafcg Switch: Siliconix 

Santa Clara, CA 

D5 

Diode: National Semiconductor 

Santa Clara, CA 

Q1,Q2 

Q3,Q4,QS,Q6 

Transistor: National Semiconductor 

Santa Clan, CA 

U4 

Operational Amplifier 
National Semiconductor 
Santa Clam, CA 
U14 
Gate 

National Scmiconductor 
Santa Clara, CA 



1.0 

OXHui 

4700 pf 

43 pi 

33 Mf 

5.4 Mf 

lMf 

LM 

47K 

10K 

IK 

2O0K 

4.7K 

47QQ 

10O 



LM555CN - 1500 Hz 



DG211 



1N4148 



2N4403 
2N4401 



LF444C4 



74HCT04 



30 



35 



40 



45 



SO 



55 



60 



COMPONENTS 

C15 
R30 

R26,R29.R32*33 

R2S.R25 

R27 

R31 

DEVICES 
U4 

Operation Amplifier: 
National Senacooductor . 
Santa Clan, CA 
DS1 

Murata Manufacturing Co, Ltd. 

Kyoto, Japan 

T2 

National Semi ronfttc tor 
Santa Clara, CA 



1.0 Mf 
475K 
4.75K 
10GK 
23 

240K 



LF444CN 



E10051 



LM34 



FIG. 10 is the detail circuit diagram of the blood oximeter 
read circuit shown as a block diagram 170 in FIG. 5. TABLE 65 
3 is the listing of components and devices used in this 
circuit 



While embodiments of the invention have been disclosed, 
the following claims disclose the scope of the invention. 
What is claimed is: 

1. A biometric, personal authentication system, compris- 
ing: 

(a) storage subsystem to store a unique, inherently spe- 
cific biometric parameter from at Least one individual in 
a species; 

(b) first detection subsystem to detect the unique, inher- 
ently specific biometric parameter in an individual 
seeking personal authentication; 

(c) second detection subsystem to detect at least one 
non-specific biometric parameter of a physiological 
characteristic having measurable variability during the 
time of authentication in the individual seeking per- 
sonal authentication, wherein the non-specific biomet- 
ric parameter is selected from the group consisting of 
pulse rate, electrocardiographic signals, spectral char- 
acteristics of human tissue, percentage oxygenation of 
blood, bloodflow, hematocrit, biochemical assays of 
tissue, electrical plethysmography, transpiration of 
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gases, electrical property of skin, blood pressure, dif- 
ferential blood volumes, and combinations thereof; 

(d) first comparison subsystem to compare (be unique, 
inherently specific biometric parameter detected by the 
first detection subsystem with the unique, inherently 5 
specific biometric parameter stored in the storage sub- 
system; 

(e) second comparison subsystem to compare each non- 
specific biometric parameter to physiological norms for 
the species; and 10 

(f) authentication subsystem to confirm identity of the 
individual seeking personal authentication by evaluat- 
ing the comparisons made by first comparison sub- 
system and second comparison subsystem. 5 

2. The system according to claim 1, wherein second 
detection subsystem detects and second comparison sub- 
system compares at least two non-specific biometric param- 
eters with a physiological correlation between the two 
non-specific biometric parameters within an acceptable ^ 
range. 

3. The system according to claim 1, wherein storage 
subsystem is used to limit database searching by processing 
a personal identification code number. 

4. The system according to claim 1, wherein storage ^ 
subsystem is resident on a card possessed by an individual 

5. The system according to claim 1, wherein the storage 
subsystem also enrolls data of (he unique, inherently bio- 
metric detection system. 

6. The system according to claim 1, wherein the non- ^ 
specific biometric parameters further include skin tempera- 
ture. 

7. The system according to claim 1, wherein the unique, 
inherently specific biometric parameter is selected from the 
group consisting of fingerprint, palm print, voice {Hint, and 35 
retinal configuration. 

8. The system according to claim 1, wherein the unique 
inherently specific biometric parameter comprises a pore 
print 

9. The system according to claim 6, wherein the unique, ^ 
inherently specific biometric parameter is selected from the 
group consisting of fingerprint, palm print, voice print, and 
retinal configuration. 

10. The system according to claim 6, wherein the unique, 
inherently specific biometric parameter comprises a pore 45 
print 

11. The system according to claim 9, further comprising 
an access subsystem to measure alcohol or controlled chemi- 
cal substance levels in blood of an individual successfully 
authenticated. ^ 

12. A method to authenticate an individual comprising the 
steps of: 

(a) placing both hands of an individual in a device 
containing a personal authentication system that con- 
currently detects a unique, inherently specific biometric 55 
parameter and detects at least one non-specific biomet- 
ric parameter of a physiological characteristic having 
measurable variability during the time of authentica- 
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tion; wherein the non-specific biometric parameter is 
selected from the group consisting of pulse rate, elec- 
trocardiographic signals, spectral characteristics of 
human tissue, percentage oxygenation of blood, 
bloodflow, hematocrit, biochemical assays of tissue, 
electrical plethysmography, transpiration of gases, 
electrical property of skin, blood pressure, differential 
blood volumes, and combinations thereof; and 
(b) comparing biometric parameters detected by the sys- 
tem to confirm identity of the individual seeking per- 
sonal authentication. 
13. A biometric, personal authentication system for con- 
trolling access to a facility by detenuining authentication of 
an individual seeking access to the facility, comprising: 

(a) storage subsystem to store a unique, inherently spe- 
cific biometric parameter from at least one individual in 
a species; 

(b) first detection subsystem to detect the unique, inher- 
ently specific biometric parameter in an individual 
seeking personal authentication; 

(c) second detection subsystem to detect at least one 
non-specific biometric parameter of a physiological 
characteristic having measurable variability during the 
time of authentication in the individual seeking per- 
sonal authentication; wherein the non-specific biomet- 
ric parameter is selected from the group consisting of 
pulse rate, electrocardiographic signals, spectral char- 
acteristics of human tissue, percentage oxygenation of 
blood, bloodflow, hematocrit, biochemical assays of 
tissue, electrical plethysmography, transpiration of 
gases, electrical property of skin, blood pressure, dif- 
ferential blood volumes, and combinations thereof; 

(d) first comparison subsystem to compare the unique, 
inherently specific biometric parameter detected by the 
first detection subsystem with the unique, inherently 
specific biometric parameter stored in the storage sub- 
system; 

(e) second comparison subsystem to compare each non- 
specific biometric parameter to physiological norms for 
the species; and 

(f) authentication subsystem to confirm identity of the 
individual seeking personal authentication by evaluat- 
ing the comparisons made by first comparison sub- 
system and second comparison subsystem, wherein the 
system further comprises an access subsystem to mea- 
sure alcohol or controlled chemical substance levels in 
blood of an individual successfully authenticated and 
wherein access to the equipment is controlled by the 
access subsystem after an individual is successfully 
authenticated; and wherein the second detection sub- 
system detects and the second comparison subsystem 
compares at least two non-specific biometric param- 
eters with a physiological correlation between the two 
non-specific biometric parameters within an acceptable 
range. 

* * * * # 
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